A contextual attribute-based access control model

  • Authors:
  • Michael J. Covington;Manoj R. Sastry

  • Affiliations:
  • Corporate Technology Group, Intel Corporation;Corporate Technology Group, Intel Corporation

  • Venue:
  • OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part II
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The emergence of ubiquitous mobile devices, such as MP3 players, cellular phones, PDAs, and laptops, has sparked the growth of rich, mobile applications Moreover, these applications are increasingly “aware” of the user and her surrounding environment Dynamic mobile environments are generating new requirements – such as allowing users to access real-time, customized services on-demand and with no prior registration – that are not currently addressed by existing approaches to authorization We investigate using contextual information present in the user's operating environment, such as a user's location, for defining an authorization policy More precisely, we have defined an access control model that uses contextual attributes to capture the dynamic properties of a mobile environment, including attributes associated with users, objects, transactions, and the environment Our Contextual Attribute-Based Access Control model lends itself more naturally to a mobile environment where subjects and objects are dynamic Our authorization model promotes the adoption of many revolutionary mobile applications by allowing for the specification of flexible access control policies.